Page 1 of 1

Services Admin: Permission Denied (??)

Posted: Tue May 03, 2005 2:38 pm
by Fussi
Hi again...

i have a.. uhm.. strange problem with the services admin flag.
In the serverconfig, there are 5 oper accounts. (With maxlogin 1)
One account (mine) has the flags:

Code: Select all

admin;
can_die;
can_restart;
can_gzline;
can_gkline;
can_zline;
get_host;
can_override;
3 have these flags:

Code: Select all

global;
can_override;
and the last 2:

Code: Select all

services-admin;
can_gzline;
can_gkline;
can_zline;
get_host;
can_override;
Now my problem:

My 2 service admins do the /oper thing, it says "You are now an IRC Operator", the other opers see "..... is now a services administrator (a)", BUT, the 'a' isnt set. If they do
"/mode <own nick>", it says something like "+iowghrsx". eg: They cant use the /sa commands.


Can anybody help me with this?

btw, i'm using unreal 3.2.1 and ircservices 5.0.48

Posted: Tue May 03, 2005 4:44 pm
by Dukat
That's a stupid "feature" of ircservices: It will remove the services-admin flag from an oper if she's not also a services-admin in operserv... Kinda annoying...
You have to add these two users to the operserv services-admin list, then it might work...

btw: You should upgrade to the latest version of Unreal IRCD

Posted: Tue May 03, 2005 5:47 pm
by katsklaw
Anope does it too. It's not exactlly stupid though. I think it's required to help keep Server Admins honest.

Lets face it .. there is a difference between a Services admin and a Server Admin. Being a Server Admin doesn't give you access to Services. If SRA's don't want a Server Admin to be a Services Admin I think they should have the power to deny it. The main problem I had is new Server Admins would make themselves Net Admins in their conf and I would have de-link them because of it. If Services could stop that as well I'd applaud happily.

Before anyone says "trust your opers/admin" I'm well aware of the trust thing. However, trust can be betrayed at anytime. At least with Services keeping the access at the correct levels and denying unathorized access, I sleep better at night.

Posted: Wed May 04, 2005 2:37 am
by Winbots
katsklaw wrote:The main problem I had is new Server Admins would make themselves Net Admins in their conf and I would have de-link them because of it. If Services could stop that as well I'd applaud happily.
KickChat Services (the ones i use) have that feature, only SRA can have Netadmin... and I think I saw an anope module to do the same...

Posted: Wed May 04, 2005 4:42 am
by Fussi
Allright, makes sense...
Ok, will try that today, thanks for your help!